Overview

overview

10

Static

static

10

tmp12jh75ol.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd8b12dcaec47b31028589aa295ab16c91278814affa1bd2664905957d472a13_pw_infected.zip

  • Size

    3.6MB

  • MD5

    98e87213c2bde60f609a4726c7f108da

  • SHA1

    a3b00fa417702898d100ab6229b3ba130f59ce42

  • SHA256

    2ca22eed73346e40d70026a704f5b3fe5279f3d235f2ac5df1d153533d4d9e0f

  • SHA512

    2b803089f8a3d134765b8263bd5bf1da82d9c08d8b53be1d02ec01d6d508a84da6928da43fd4f7fc84231af659b9e8b3b0e3bed2797465e1445b0e7bfc571a51

  • SSDEEP

    98304:/NkG37ouUdqswrjkY3VqeA/2gFxSnKtG7m6Jjrt:l5UBdHw3TkeABFjG9JV

Score
10/10
themidad4074b8c479181b90e810443a9405f3craccoon

Malware Config

Extracted

Family

raccoon

Botnet

d4074b8c479181b90e810443a9405f3c

C2

http://37.220.87.44/

http://94.131.3.70/

http://83.217.11.11/

http://83.217.11.13/

http://83.217.11.14/
rc4.plain

Signatures

  • Raccoon family
    raccoon
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida

Files

  • bd8b12dcaec47b31028589aa295ab16c91278814affa1bd2664905957d472a13_pw_infected.zip
    .zip

    Password: infected

  • tmp12jh75ol
    .exe windows x86

    Password: infected


    Headers

    Sections